CVE-2026-28463

creationtimestamp| type| source ---|---|--- 2026-03-06 11:01:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgf5xp6xo62c...

CVE-2026-28463 OpenClaw < 2026.2.14 - Arbitrary File Read via Shell Expansion in Safe Bins Allowlist

OpenClaw versions prior to 2026.2.14 contain an arbitrary file read vulnerability in the exec-approvals allowlist validation that checks pre-expansion argv tokens but executes using real shell expansion. Attackers with authorization or through prompt-injection attacks can exploit safe binaries li...